Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LsCCWjkxYPxk58h9ZRYy-bct0Bc.roa
File: LsCCWjkxYPxk58h9ZRYy-bct0Bc.roa (raw, json)
Hash identifier: ueXIy5QOrgHz9I5ZQC6Sy4xauojpK0t8jCE0t7eO+II=
Subject key identifier: 2E:C0:82:5A:39:31:60:FC:64:E7:C8:7D:65:16:32:F9:B7:2D:D0:17
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A08C480F7E74CF497035C7BE5B5F6E87EA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LsCCWjkxYPxk58h9ZRYy-bct0Bc.roa
Signing time: Thu 10 Sep 2026 17:05:27 +0000
ROA not before: Thu 10 Sep 2026 17:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59592
IP address blocks: 5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
2a02:2fc0:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:48:0f:7e:74:cf:49:70:35:c7:be:5b:5f:6e:87:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 10 17:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ec0825a393160fc64e7c87d651632f9b72dd017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:36:34:b8:3e:c4:16:95:54:9d:d1:b9:90:
1c:b4:45:1f:fd:8a:bf:9e:04:57:6e:7e:ac:63:f6:
58:a4:2c:76:56:7e:a9:49:0f:8f:01:51:02:2e:6e:
d9:d9:f8:99:1f:b6:62:a0:be:82:d2:be:1b:5a:b4:
0e:f7:6f:ef:71:04:51:e1:82:c3:4f:5e:4c:7a:33:
aa:7f:b3:b7:35:75:75:08:3a:16:87:18:72:ec:15:
05:74:bb:08:a2:86:52:db:1c:0a:a9:74:6e:c0:7e:
ae:2b:3a:5b:36:cc:63:df:40:98:0a:5b:f7:21:dd:
64:cd:da:5b:4f:db:17:7e:af:57:12:96:a3:be:db:
c5:7a:bc:7e:a1:1e:4f:a2:e9:d8:a8:ba:c3:01:0f:
b3:eb:82:bf:c8:9d:37:7f:0d:95:0e:6f:78:15:9e:
94:f5:7f:15:0f:8d:f8:fa:27:47:14:84:b4:ee:69:
a3:cd:b5:c2:cd:f5:7f:18:ad:60:55:85:8a:17:d1:
64:62:da:ab:2d:5f:07:97:0d:17:1e:6b:99:2f:17:
01:99:ff:3b:7d:24:21:5b:62:89:79:37:cd:dc:6e:
47:05:3e:2d:9f:f1:d2:6b:c3:c9:72:0c:bb:b5:10:
f6:e5:88:96:76:9d:cd:7c:6d:d6:b0:58:4e:69:0d:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:82:5A:39:31:60:FC:64:E7:C8:7D:65:16:32:F9:B7:2D:D0:17
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LsCCWjkxYPxk58h9ZRYy-bct0Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
IPv6:
2a02:2fc0:e::/48
Signature Algorithm: sha256WithRSAEncryption
16:b5:43:1e:1a:16:c5:b5:f9:e9:15:bb:bf:25:24:40:2a:3e:
5d:73:6f:b1:c7:9b:be:71:4f:17:d4:bd:7f:97:ca:2f:17:22:
7f:92:cb:2d:3b:36:20:a2:7b:34:60:4d:bf:09:cd:8b:fc:63:
0b:b1:8f:8c:b2:17:52:5a:c1:28:5c:8e:9f:33:ba:b0:b2:96:
94:fb:45:08:77:96:9a:83:db:56:64:88:88:90:7d:91:60:e7:
35:1f:b4:de:3d:b0:75:9f:1e:de:09:30:5c:79:a9:71:0d:b7:
97:6f:92:58:ec:8b:77:3e:4d:91:b4:67:4a:16:41:29:f8:98:
02:31:c2:cb:ce:62:a3:20:5a:2a:82:e5:bb:75:92:ff:e4:09:
4e:20:5c:8e:05:de:e0:e8:b6:22:fa:5c:3c:ed:71:12:1a:74:
af:17:b7:7b:f6:a5:98:52:1d:01:fe:5e:04:68:d9:c0:93:a8:
02:d7:f6:1e:02:55:a8:f9:44:b4:47:06:ac:63:1a:a1:f7:1d:
ad:73:08:bf:24:c2:33:95:4a:6b:d9:e9:9d:2d:dc:c6:8c:9c:
40:4b:ce:d0:09:7f:4b:31:89:09:78:0b:78:4f:fb:96:85:29:
44:a2:5f:d3:1f:45:1f:75:41:53:84:da:28:67:90:36:62:40:
bb:61:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:33 2026 by rpki-client